Nextcloud server changelog

We strongly recommend to stay up to date with Nextcloud to keep your data safe. The minor releases fix security issues that are found through, for example, our HackerOne program. Not doing so can put your data at risk. Update timely and don’t run unmaintained Nextcloud versions. Privacy does not exist without security.
Our security policy is to publicize CVE’s about 3 weeks after public availability of a new minor release. Administrators can then learn more about the vulnerabilities fixed and determine if their systems might have been vulnerable. As malicious actors are at this point more able to determine attack vectors, it is important to have updated before the CVE’s are published.

We provide advance patches and security information for no-downtime-security-patching for Nextcloud Enterprise. If you run a server with sensitive data at scale, we highly recommend to use Nextcloud Enterprise.